Alternatives and similar repositories for logstash-codec-cef:

Users that are interested in logstash-codec-cef are comparing it to the libraries listed below

• hvandenb / splunk-elasticsearch
  A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI
  ☆67Updated 7 years ago
• doksu / splunk_auditd
  Splunk App for Linux Auditd
  ☆57Updated 3 years ago
• elastic / ecs-mapper
  Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash
  ☆54Updated 2 years ago
• libresec / duo-log-grabber
  Grabs the administrator and authentication logs from the Duo Security API and sends CEF-formatted syslog.
  ☆28Updated 8 years ago
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆141Updated last year
• carbonblack / cbc-syslog
  Syslog Connector for the Carbon Black Cloud
  ☆29Updated 4 months ago
• alertmanager / alert_manager
  Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features
  ☆81Updated 2 years ago
• josehelps / Splunk-Mitigation-Framework
  Framework that sits on top of Splunk Enterprise Security to do auto-mitigation
  ☆14Updated 10 years ago
• jonschipp / ISLET
  Isolated, Scalable, & Lightweight Environment for Training
  ☆111Updated 5 years ago
• mhassan2 / splunk-n-box
  Docker Splunk "Orchestration" bash script (6,000+ lines) to create fully automated pre-configured splunk site-2-site clusters or stand al…
  ☆138Updated 4 years ago
• cvandeplas / ELK-forensics
  ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
  ☆179Updated 5 years ago
• HASecuritySolutions / Logstash
  Contains Logstash related content including tons of Logstash configurations
  ☆253Updated 3 years ago
• josehelps / splunk-ansible-advance
  Advance Ansible configuration to deploy Splunk. Implements dynamic inventory under the AWS platform.
  ☆33Updated 9 years ago
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 3 years ago
• doksu / selinux_policy_for_splunk
  SELinux Policy for Splunk
  ☆56Updated 5 years ago
• sm-biz / paloalto-elasticstack-viz
  PANW Firewall Visualisations using Elastic Stack
  ☆90Updated last year
• DavidJBianco / pycef
  A very simple CEF parser for Python
  ☆27Updated 4 years ago
• voxpupuli / puppet-splunk
  Manage Splunk servers and forwarders using Puppet
  ☆41Updated 2 weeks ago
• splunk / docker-itmonitoring
  Get Started with Streaming your Docker Logs and Stats in Splunk!
  ☆68Updated 6 years ago
• lnetto / upgrade_linux_uf
  ☆14Updated 7 years ago
• PaloAltoNetworks / minemeld-webui
  WebUI of MineMeld
  ☆43Updated last year
• alanwill / ansible-splunk
  Ansible playbook for installing Splunk 6 on an AWS infrastruture
  ☆20Updated 9 years ago
• outcoldman / docker-splunk-cluster
  How to run cluster of Splunk Enterprise in Docker. Examples.
  ☆32Updated 8 years ago
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆86Updated last year
• tanium / pytan
  Python Wrapper for Tanium's SOAP API
  ☆45Updated 5 years ago
• sghaskell / kafka-splunk-consumer
  PyKafka consumer to push events to Splunk HTTP Event Collector
  ☆17Updated 7 years ago
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• Kintyre / ksconf
  Kintyre's Splunk Configuration tool
  ☆50Updated last year
• capesstack / capes
  Cyber Analytics Platform and Examination System (CAPES) Project Page
  ☆60Updated 5 years ago
• P1llus / ArcSight-Rest
  Python library for the ArcSight logger REST API
  ☆27Updated 3 years ago